Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.mft
File: DQMTeXANNd0Akr0GHGA-bLJWGnU.mft (raw, json)
Hash identifier: TGRu27gVrcbkY1DKIvo7HJ6p3g1yQCkKLLgtVtdBCF8=
Subject key identifier: 23:08:FA:19:5E:5A:38:A7:28:2E:DE:A5:77:B0:E2:7B:63:C7:D4:9F
Authority key identifier: 0D:03:13:79:70:0D:35:DD:00:92:BD:06:1C:60:3E:6C:B2:56:1A:75
Certificate issuer: /CN=0d031379700d35dd0092bd061c603e6cb2561a75
Certificate serial: 019D28BBA5D3DEBCED034312BC6BC0A78F01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQMTeXANNd0Akr0GHGA-bLJWGnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.mft
Manifest number: 0315
Signing time: Thu 26 Mar 2026 06:01:19 +0000
Manifest this update: Thu 26 Mar 2026 06:01:19 +0000
Manifest next update: Fri 27 Mar 2026 06:01:19 +0000
Files and hashes: 1: 0pkuqzvhduSck3Ha7xOc7WG-8JA.roa (hash: o9t9fokSPRDcMcuSn/HePatJg9nqZBhL9E5qotJE2cw=)
2: DQMTeXANNd0Akr0GHGA-bLJWGnU.crl (hash: 8wNbhrVG40l/E3aXxUoGgTduFSV/eZOwgzKPjbBx1Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQMTeXANNd0Akr0GHGA-bLJWGnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:a5:d3:de:bc:ed:03:43:12:bc:6b:c0:a7:8f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d031379700d35dd0092bd061c603e6cb2561a75
Validity
Not Before: Mar 26 06:01:19 2026 GMT
Not After : Mar 27 06:01:19 2026 GMT
Subject: CN=2308fa195e5a38a7282edea577b0e27b63c7d49f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ae:84:5c:a0:b6:bc:db:21:e6:cc:b7:b1:ab:
9d:f4:f1:fb:b8:11:f3:88:cd:5c:25:c1:f1:0d:66:
11:04:31:0e:be:da:a4:8e:a7:2e:c1:9e:71:30:b2:
ce:a6:db:bc:4f:cf:5c:c2:b1:db:11:0b:33:f7:c7:
45:3c:3f:4c:55:fd:4f:47:58:65:df:98:4a:26:5c:
3a:a3:08:28:c5:a5:78:8b:de:ca:62:c7:0d:fc:02:
c5:a8:c8:4e:a2:0c:9f:4e:34:57:16:f5:a0:10:d7:
58:64:18:f0:84:ef:6f:87:fc:0f:61:a9:a3:27:32:
b5:53:7f:9e:dd:83:10:97:c9:c9:49:85:9e:3e:de:
68:3a:f0:5e:26:0f:35:9f:8c:c2:1e:f0:93:31:80:
5a:de:01:45:98:e9:03:40:d1:67:4d:50:7c:b5:e5:
66:cb:bc:bc:c2:a0:da:50:62:3d:5a:d4:44:0b:57:
5f:2e:51:9f:99:f7:71:1f:d6:e2:22:ac:a7:35:98:
58:cd:12:0f:f1:f4:57:03:2c:23:a7:d8:1a:b2:d8:
4e:ce:7d:8b:d9:29:e6:fa:ce:01:d3:57:8e:b6:30:
49:23:1b:06:4c:d4:31:7a:32:45:80:56:62:c5:3a:
7c:11:87:6d:e5:2c:91:07:26:86:1d:70:cb:ee:c8:
06:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:08:FA:19:5E:5A:38:A7:28:2E:DE:A5:77:B0:E2:7B:63:C7:D4:9F
X509v3 Authority Key Identifier:
keyid:0D:03:13:79:70:0D:35:DD:00:92:BD:06:1C:60:3E:6C:B2:56:1A:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQMTeXANNd0Akr0GHGA-bLJWGnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:33:40:30:99:d5:ea:af:52:10:b8:cf:19:72:39:ca:30:b5:
dc:05:73:7c:7f:64:7e:d3:d6:40:54:cc:8e:b1:f8:fc:2c:b5:
36:3e:18:9a:2b:1c:ba:02:cd:60:8f:9a:9c:6c:12:18:ad:43:
00:2a:95:d3:c6:cc:3e:09:ea:e2:f6:cb:9a:59:57:e3:09:42:
30:04:d6:95:81:8a:2e:27:11:9d:06:5c:b6:5e:89:e2:62:8a:
01:58:22:16:68:a3:42:44:30:b0:3b:fc:5a:8c:11:17:17:0a:
44:89:1f:d1:52:e1:c0:39:d8:b5:23:89:2e:59:a0:db:66:3a:
ff:00:7c:39:ec:5c:52:3c:4f:7f:f0:3b:4a:bf:df:42:dd:24:
fc:89:cf:08:e2:05:cd:f4:9d:96:01:5c:31:55:70:ff:30:77:
5c:9c:f6:17:88:a2:ac:b9:e3:7a:57:1e:d1:95:9b:fb:a9:bf:
ed:d1:3b:e5:98:01:30:33:e2:73:16:ce:bb:54:34:10:eb:83:
2e:4c:da:1a:db:27:33:7c:2d:b6:85:9e:78:c4:26:9d:3d:2a:
ed:e0:64:fa:42:1e:0d:44:cd:01:72:be:1f:9d:52:ed:4c:5f:
82:09:93:3c:e5:16:95:81:af:1e:ca:30:71:20:f6:64:eb:96:
cb:5e:4e:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou6XT3rztA0MSvGvAp48BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMDMxMzc5NzAwZDM1ZGQwMDkyYmQwNjFjNjAzZTZjYjI1
NjFhNzUwHhcNMjYwMzI2MDYwMTE5WhcNMjYwMzI3MDYwMTE5WjAzMTEwLwYDVQQD
EygyMzA4ZmExOTVlNWEzOGE3MjgyZWRlYTU3N2IwZTI3YjYzYzdkNDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArK6EXKC2vNsh5sy3saud9PH7uBHz
iM1cJcHxDWYRBDEOvtqkjqcuwZ5xMLLOptu8T89cwrHbEQsz98dFPD9MVf1PR1hl
35hKJlw6owgoxaV4i97KYscN/ALFqMhOogyfTjRXFvWgENdYZBjwhO9vh/wPYamj
JzK1U3+e3YMQl8nJSYWePt5oOvBeJg81n4zCHvCTMYBa3gFFmOkDQNFnTVB8teVm
y7y8wqDaUGI9WtREC1dfLlGfmfdxH9biIqynNZhYzRIP8fRXAywjp9gasthOzn2L
2Snm+s4B01eOtjBJIxsGTNQxejJFgFZixTp8EYdt5SyRByaGHXDL7sgGUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCMI+hleWjinKC7epXew4ntjx9SfMB8GA1UdIwQY
MBaAFA0DE3lwDTXdAJK9BhxgPmyyVhp1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFFNVGVYQU5OZDBBa3IwR0hHQS1iTEpXR25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS80MDk3NTItOWQ4Yy00MGY1LTkxMjUt
OWMwNjczNzk3OWQxLzEvRFFNVGVYQU5OZDBBa3IwR0hHQS1iTEpXR25VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS80MDk3NTItOWQ4Yy00MGY1LTkxMjUtOWMwNjczNzk3OWQx
LzEvRFFNVGVYQU5OZDBBa3IwR0hHQS1iTEpXR25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqDNAMJnV
6q9SELjPGXI5yjC13AVzfH9kftPWQFTMjrH4/Cy1Nj4YmiscugLNYI+anGwSGK1D
ACqV08bMPgnq4vbLmllX4wlCMATWlYGKLicRnQZctl6J4mKKAVgiFmijQkQwsDv8
WowRFxcKRIkf0VLhwDnYtSOJLlmg22Y6/wB8OexcUjxPf/A7Sr/fQt0k/InPCOIF
zfSdlgFcMVVw/zB3XJz2F4iirLnjelce0ZWb+6m/7dE75ZgBMDPicxbOu1Q0EOuD
LkzaGtsnM3wttoWeeMQmnT0q7eBk+kIeDUTNAXK+H51S7UxfggmTPOUWlYGvHsow
cSD2ZOuWy15OiA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:31:14 2026 by rpki-client